Never click the links, these websites have hidden code that can steal stuff from you via a number on methods. Just visiting such sites compromises your accounts and browser extensions.
One way to prevent metamask from being compromised (at least to some degree) is to make it so the extension can only access and interact with whitelisted websites, at least then they won't be able to steal you account as easily.
I'm a hive witness supporting the blockchain please consider voting for me.
This is a great tip!